Hi, >Another concern is that it's very intrusive and tons of services don't >like to receive binary data and such. This problem is lightened by the >fact that the assumptions regarding ports in the service file prevent >nasty stuff from happening. > Here's a thought... have a "nmap -sV" wrapper as a trusted plugin that runs after find_services and all the _detect.nasl plugins. It uses nmap to try to identify all the unknown services. I guess you'd probably mark it as ACT_DESTRUCTIVE_ATTACK. Paul -- Paul Johnston Internet Security Specialist Westpoint Limited Albion Wharf, 19 Albion Street, Manchester, M1 5LN England Tel: +44 (0)161 237 1028 Fax: +44 (0)161 237 1031 email: paul@private web: www.westpoint.ltd.uk _______________________________________________ Plugins-writers mailing list Plugins-writers@private http://mail.nessus.org/mailman/listinfo/plugins-writers
This archive was generated by hypermail 2b30 : Mon Dec 22 2003 - 03:57:18 PST